
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
File: 7qM-huKBrRPcYp8y2NU3YK4dAEc.mft (raw, json)
Hash identifier: csfjeqX0ShMh5NInDvfmRbs1EAsCJfIng7B3JboLSeg=
Subject key identifier: C9:CC:AB:E7:EB:A1:47:11:6A:85:81:86:0E:8C:9E:DE:66:BF:76:6A
Authority key identifier: EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47
Certificate issuer: /CN=A91F30AE/serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047
Certificate serial: 059A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
Manifest number: 0592
Signing time: Tue 22 Sep 2026 22:53:48 +0000
Manifest this update: Tue 22 Sep 2026 22:53:48 +0000
Manifest next update: Tue 29 Sep 2026 22:53:48 +0000
Files and hashes: 1: 7qM-huKBrRPcYp8y2NU3YK4dAEc.crl (hash: YcluvJIKLTlwWyqKVgwkyEY9xG6SgoeerWibFrDxZHc=)
2: 84CEFB0E379111EC92DB9A48C4F9AE02.roa (hash: 6jMHqR+sIEqTC6A+nK6qfLEa0VEYokKzKQUPqiIn6fg=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl
rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 22:53:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1434 (0x59a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F30AE, serialNumber=EEA33E86E281AD13DC629F32D8D53760AE1D0047
Validity
Not Before: Sep 22 22:53:48 2026 GMT
Not After : Sep 29 22:53:48 2026 GMT
Subject: CN=6ab306fc-fa55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:d5:fe:4f:01:b3:29:65:b5:b7:35:21:be:
0a:e8:a7:6f:40:27:ba:95:27:4a:2f:2c:fb:a2:36:
63:5b:b3:51:57:15:b7:c6:7f:e0:68:80:42:29:0f:
60:e1:07:3d:1e:76:81:2a:86:0d:89:78:80:c6:e4:
12:06:c6:e3:6e:42:9f:81:42:5a:25:db:4b:bb:dd:
70:f4:d5:30:3f:8e:0f:e7:8e:06:92:11:11:82:99:
e3:f8:92:3a:ed:37:d3:f3:a5:37:2a:f7:18:52:e6:
dd:b1:73:71:53:3d:58:db:3f:a6:88:74:dc:f9:31:
54:c3:ca:d6:6b:c4:4d:04:94:7e:f9:97:ff:37:11:
6d:10:36:1d:7a:a3:f5:fc:04:38:10:f8:03:7e:3e:
93:e7:2a:21:47:cc:82:3d:c3:f3:a3:91:37:9d:80:
cf:6b:8d:c4:a7:bd:c3:08:91:87:8e:e9:2e:97:b9:
9d:49:24:52:6c:ce:24:01:80:72:09:62:6b:f3:2a:
58:ae:0f:fa:ad:8e:15:45:2a:dd:88:95:cc:4c:4b:
5d:6f:a6:8d:d6:d7:81:b1:58:25:a2:ab:0e:f7:8b:
e3:53:67:d8:8c:fc:41:ec:e4:76:67:1e:b9:3d:af:
21:2e:a3:a9:60:b9:ae:c9:6e:03:44:a1:31:12:0e:
82:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CC:AB:E7:EB:A1:47:11:6A:85:81:86:0E:8C:9E:DE:66:BF:76:6A
X509v3 Authority Key Identifier:
keyid:EE:A3:3E:86:E2:81:AD:13:DC:62:9F:32:D8:D5:37:60:AE:1D:00:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7qM-huKBrRPcYp8y2NU3YK4dAEc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F30AE/E7FC0D14378E11EC843CD245C4F9AE02/7qM-huKBrRPcYp8y2NU3YK4dAEc.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:4d:2f:71:38:60:8f:f2:35:3f:b3:bf:b7:13:e5:40:f0:24:
9c:bc:84:2e:75:99:52:a4:fa:57:5f:ed:e0:3a:f5:1a:a9:a7:
97:83:1d:40:98:ab:31:63:9d:73:06:81:2a:95:cd:06:71:60:
d9:1b:32:6e:29:7a:07:9b:50:93:9e:93:7a:5c:5b:dc:40:7a:
88:72:3c:68:36:75:12:b7:2f:80:30:d3:0c:62:71:11:c1:2b:
46:1a:e2:3d:be:c4:72:e1:ee:44:6e:59:0a:7d:af:74:b1:11:
01:df:1f:fd:0f:53:8f:b7:d1:f7:f4:fb:9b:5d:a1:1c:d7:23:
25:02:8b:f0:4f:ae:14:a8:5c:68:b1:55:c7:39:b5:75:21:79:
3b:52:e3:69:5b:94:e1:03:9d:2d:e0:a2:f6:98:26:30:33:00:
d3:43:86:f5:df:42:c2:58:ab:81:8b:60:1d:26:65:82:f1:4e:
2f:1f:4e:76:28:e6:c8:dc:3e:19:d3:af:e6:2d:ff:ae:4a:be:
41:63:3a:b6:32:66:22:cb:60:8c:07:d2:6b:d7:01:db:c6:82:
20:95:48:e8:54:ca:b5:bb:6a:82:46:1c:99:e2:51:ee:06:f6:
71:aa:9e:6c:c9:77:fa:ec:8a:45:34:33:dc:8f:c1:f0:22:66:
41:46:38:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:18:41 2026 by rpki-client